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COURSE: GSHSHAN) OVSC1205 Special Training on FISA (Analytical) 
COURSE: GSHSIENF) OVSC1206 Special Training on FISA (Technical) 
Module 1: (FS/S!//NF) Business Records (BR) and Pen Register Trap and Trace (PR/TT) Bulk Metadata Programs 


DATE/PREPARER: TAP Topic Page Classification Screen Number 
(U) Module FOP-SECREFHISHINOFORN 1 of 12 
Introduction 


FRAME ID: 1010 
(U) MODULE 1 


(7S/SH/NF) Business Records (BR) and Pen Register Trap and Trace (PR/TT) Bulk 

Metadata Programs 

NEXT FRAME ID: 1020 
(U) This module will enable you to: 


CFSHSIYNF) Identify the purpose of the BR and PR/TT Bulk Metadata Programs 


(FSHSH/NE} Identify the I] Foreign Powers covered by the BR and PR/TT Foreign 


ALT TAG: Intelligence Surveillance Court {FISC} Orders 


CFSHSIYNE)-Contrast the differences in the authorities granted between BR FISC 
GRAPHICI/AV: Orders and PR/TT FISC Orders 


(U) Present learning objectives in the travel . ; 
journal CESHSIYNF) Recognize the role of the Bulk Metadata Programs in the context of the 


broader set of SIGINT authorities 


(FSYSIWNF) (OGC Attorney): During the first part of our road trip we will discuss the Business Records (BR) and Pen Register Trap and Trace (PR/TT) 
Bulk Metadata Programs at a high level. As we progress on our road trip, we will discuss various aspects of the authorities granted by the Foreign 
Intelligence Surveillance Court (FISC) which support the BR and PR/TT programs and the policies that NSA implements to provide reasonable assurance 
that we are compliant with these authorities. 
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(U) This module will enable you to: 
e = ©(FSHSIANF) Identify the purpose of the BR and PR/TT Bulk Metadata Programs 
e § (TS//SI//NF) Identify the Bl Foreign Powers covered by the BR and PR/TT Foreign Intelligence Surveillance Court (FISC) Orders 
| 


e (TS/SV/N iis in the authorities granted between BR FISC Orders and PR/TT FISC Orders 


e (FSHSIANF) Recognize the role of the Bulk Metadata Programs in the context of the broader set of SIGINT authorities 


Scroll over text for foreign powers: 
(FSHSIYNF) Under the FISA statute, a foreign power can include “a group engaged in international terrorism or activities in preparation therefore.” 
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DATE/PREPARER: TAP Topic Page Classification Screen Number 
(FSHSIZNE) The Purpose of FOP-SESRETISHNOFORN 2 of 12 
the Bulk Metadata Programs 


FRAME ID: 1020 


(FSHSIENF) The purpose of the BR and PR/TT Bulk Metadata Programs is to support 
NEXT FRAME ID: 1030 the Counterterrorism mission. 


BACK FRAME ID: 1010 (FSHSHZNF) Bulk metadata consists of “unselected” communications events, and the 


BR and PR/TT Bulk Metadata programs complement NSA’s traditional selection-based 
intelligence collection. 


GRAPHIC/AV: 
(FSHSH/NEF) Possible cutaway images 
may include: 


e images pertinent to telephone and 
internet communications, 
terrorism and counterterrorism, 
and legal iconography 
image depicting notional storage 
of bulk metadata and U.S. person 
information 


(FSHSWNE) (OGC Attorney): The BR and PR/TT programs are supported by two special authorities granted by the FISC which permit NSA to obtain 
telephony and internet communications bulk metadata from U.S.-based telecommunications service providers. The authority was granted by the FISC in 
support of the Counterterrorism mission to permit NSA to learn more about a terrorist target’s communications, even those terrorists potentially 
located in the United States. 


(FSHSIENF) Bulk metadata consists of “unselected” communications events, and the BR and PR/TT Bulk Metadata Programs complement NSA’s 
traditional selection-based intelligence collection. 


(FSHSIENE) As you can probably imagine, bulk internet and telephony metadata, acquired within the United States, contains information to, from, or about 
U.S. persons. Therefore, because there is unminimized U.S. person information included within this type of metadata, there are special rules and 
procedures we must follow when acquiring, processing, accessing, storing, sharing, and disseminating this information. This metadata is highly sensitive 
which is why we have this specialized training. 


(FSHSIZNEF) In this course we discuss the metadata we collect, how we collect it, what we are permitted to do with it as well as other special rules and 
procedures we must follow. 
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DATE/PREPARER: TAP Topic Page Classification Screen Number 
CFSHSIZNE) Introduction to the BR FOP-SESRETFISHNOFORN 3 of 12 
and PR/TT Bulk Metadata Programs 


FRAME ID: 1030 


NEXT FRAME ID: 1040 


BACK FRAME ID: 1020 


ALT TAG: 


GRAPHIC/AV: 
(FS#SWNE) Possible cutaway images 


may include: 

e images pertinent to 
telecommunications and internet 
communications, call records, 
emai 


(FSHSIENE) (OGC Attorney): To get started, let's discuss the individual Bulk Metadata Programs. The BR Program pertains to the acquisition of telephony 
metadata. The associated FISC Order allows NSA to ask specific U.S.-based telecommunications service providers for their business records. The 
business records, also known as call detail records, contain information about phone calls. 


ome The PR/TT ase and associated FISC Order permits the collection of bulk Internet communications metadata. E 


(FSHSI/NF) Under both these FISC orders, NSA is prohibited from acquirina communications content. Under these Programs, NSA may not listen to 
phone calls, or collect the body or subject of an email — The Bulk Metadata authorities permit thel 
about the communications. 


(FS4SWNE) In Module 2, we will explore how each type of metadata is obtained and what specific information each order permits NSA to collect. 
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DATE/PREPARER: TAP cy Touring te data | ToRSECRETISUMOFORN | Classification ee ae Number 
cy Touring te data Touching” the data | ToRSECRETISUMOFORN | ee ae of 12 


FRAME ID: 1040 


NEXT FRAME ID: 1050 


BACK FRAME ID: 1030 


ALT TAG: 


GRAPHIC/AV: 
(FS4SWNF) Possible cutaway images may 
include: 


® images pertinent to querying data 


+ image of query results being 
shared, disseminated, and retained 


(FSHSWNF) (OGC Attorney): Due to the sensitivity of the data and the desire to protect the privacy of U.S. persons, the FISC imposes restrictions on how 
we can touch the data. For the purposes of this course, by “touch” we mean any activity where there is an opportunity to commit a violation with regards to 
the Orders governing these authorities. We recognize that it takes a very diverse team of individuals working to see that the data is properly acquired, 
routed, prepared, stored, then queried, shared and disseminated. From acquisition to dissemination, including management and compliance, if you play a 
role in enabling this data to be used for its intelligence value, we consider you to be someone who “touches” this data. 


(FSHSIHZNF) NSA’s goal is to provide reasonable assurance that we are complying with the law AND making the most of these authorities to support the 
counterterrorism mission and protect the United States. 
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DATE/PREPARER: TAP Susu smarts inhe BR | | FOP SECRENSUNOFORN Classification O a Number 
Susu smarts in 1e BR | Similarities in the BR FOP-SECREFHISH/NOFORN 5 of 12 
and PR/TT Orders 


FRAME ID: 1050 


NEXT FRAME ID: 1055 


BACK FRAME ID: 1040 


ALT TAG: 


GRAPHIC/AV: 
(U) Possible cutaway images may 
include: 
images that depict the 
similarities highlighted in the 
script 
Foreign Powers 
RAS 


(FSHSWNF) (OGC Attorney): BR and PR/TT are two separate orders issued by the FISC, though the general access, sharing, dissemination, and retention 
rules are the same for the two programs. Those similarities are why the training for both is covered in this course. Additionally, both Orders taraet the same 
‘Jroubs. referred to in the Orders as the Foreian Powers. The Foreian Powers named in the orders are 

Both the BR and PR/TT prog 
Articulable Suspicion, or RAS, to gain approval to query the bulk metadata with an identifier. We will get into much more detail about these two topics in 
later modules. 
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DATE/PREPARER: TAP Topic Page Classification Screen Number 
(FSHSI/NEF) Differences in FOP-SEGREFYSH/INOFORN 6 of 12 
the BR and PR/TT Orders 


Home: Next. 
FRAME ID: 1055 


NEXT FRAME ID: 1060 


BACK FRAME ID: 1050 


ALT TAG: 


GRAPHIC/AV: 
(U) Possible cutaway images may 
include: 
e images that depict the 
differences highlighted in the 
script 


(FSHSWNE) (OGC Attorney): There are two high level differences between the Orders as well. Details of the differences will be addressed in later modules, 
but at a basic level, the biggest difference between the two Programs is how the metadata is obtained. 


(FSHSIENE) The other point where the Bulk Metadata Programs differ is in the area of hop restrictions for contact chaining. This will be described in detail 
in Module 4, but for now it is important to know that according to the Orders the hop restrictions are different for the BR and PR/TT Programs. 
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DATE/PREPARER: TAP Topic Page Classification Screen Number 
(U) Updates to FOR-SECRETISIVNOFORN. 7 of 12 
the Orders 


FRAME ID: 1060 


NEXT FRAME ID: 1070 


BACK FRAME ID: 1020 


ALT TAG: 


GRAPHIC/AV: 
(U) Possible cutaway images may include: 


® images pertinent to annual training 


e Images depicting orders being 
issued every 90 days 


(FSHSWANF) (OGC Attorney): NSA must reapply to the FISC every 90 days to continue operating under these authorities. This process allows for the 
Government to seek modifications and for the FISC to update these authorities to reflect changes that may affect NSA's collection and handling of BR and 
PR/TT bulk metadata. It is also crucial that all factors associated with NSA’s implementation of these programs are fully compliant with the FISC Orders 
and guidelines. 


(FS4SIZNF) As new orders are issued, this training may be augmented to address significant changes. Your organization will notify you if or when 
additional training is necessary. Should you have questions, you are strongly encouraged to contact your manager, Counterterrorism (CT) Homeland 
Security Analysis Center (HSAC), Technology Directorate (TD) Compliance, SID Oversight and Compliance, or the Office of General Counsel (OGC) for 
assistance and guidance. 
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DATE/PREPARER: SLS Topic Page Classification Screen Number 
(U) The Role of the Bulk FOP-SEGREHISHINOFORN 8 of 12 
Metadata Programs 


FRAME ID: 1070 
CFSHSIZNF) NSA may perform SIGINT functions under various FISA authorities to include: 
NSA FISA 
FAA Section 702 


NEXT FRAME ID: 1075 FAA Section 704 
FAA Section 705(b) 


(FS#SHNF) BR and PR/TT Bulk Metadata Programs provide analysts with another opportunity to gain unique 


BACK FRAME ID: 1060 collection on a target 
ALT TAG: CFSHSIHNF) By leveraging various collection authorities, analysts can fill existing knowledge gaps on their 


GRAPHIC/AV: tanget 


(FSHSIENF) (OGC Attorney): Now that you have a better understanding of what the BR and PR/TT Bulk Metadata Programs are, you may be wondering 
where these programs fit in the context of the broader set of SIGINT authorities. 


(FSHSIZNF) Recall from OVSC1100, the Overview of Signals Intelligence Authorities, that we learned that in addition to E.O. 12333, NSA may perform 
SIGINT functions under various FISA authorities to include NSA FISA, FBI FISA, FISA Amendments Act (FAA) Section 702, 704, and 705(b). While there 
are specific rules governing when and how these authorities may be applied, each of these authorities has the potential to provide a valuable and unique 
complement to our E.O. 12333 collection resources. Similarly, the BR and PR/TT Bulk Metadata Programs provide analysts with another opportunity to 
gain unique collection on a target. By leveraging as many of these various collection authorities available to them as permitted, analysts can fill existing 
knowledge gaps on their target. 


(FSHSHANF) One prime example of how an analyst leveraged several of these collection authorities to close crucial knowledge gaps on a target occurred in 
Fall 2009, when a CT analyst pieced together information obtained from E.O. 12333, FAA 702, and BR FISA authorities to reveal a terrorist plot on the New 
York subway system, which was subsequently disrupted by the FBI. 
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DATE/PREPARER: SLS Topic Page Classification Screen Number 
(U) The Role of the Bulk FOP-SEGREHISHINOFORN 9 of 12 
Metadata Programs (cont.) 


FRAME ID: 1075 
(FSHSHANF) Similarities between SPCMA and BR & PR/TT 


e (S//SI//NF}Both involve exclusively metadata 
NEXT FRAME ID: 1080 © (S//Si//NF Both allow for querying of U.S. person identifiers under specific circumstances 


(FSHSEANF) Differences between SPCMA and BR & PR/TT 
BACK FRAME ID: 1070 
ALT TAG: e <SHSIWNF}Source of the metadata e {FS//SI/ANF} To query the 
o SPCMA procedures apply to metadata metadata: 


GRAPHIC/AV: already lawfully collected under E.O. o SPCMA requires valid and 
12333, NSA FISA, FBI FISA, FAA 702, 704, documented foreign intelligence 
and 705¢b) authorities purpose 
BR and PR/TT programs authorize the BR and PR/TT require RAS- 
acquisition of unselected, bulk metadata approved identifier for a limited 

target set 


(FSHSIZNF) (OGC Attorney): It is also important to understand what the BR and PR/TT Bulk Metadata programs are not. You may have heard of SPCMA — 
the Supplemental Procedures Governing Communications Metadata Analysis. They allow NSA to treat communications metadata differently than content in 
the course of the analysis of communications metadata already lawfully collected under E.O. 12333, NSA FISA, FBI FISA, FAA 702, 704, and 705(b) 
authorities. Specifically, given a valid and documented foreign intelligence purpose, these new procedures permit contact chaining, 

ommunications metadata identifier, irrespective of nationality or location, in order to follow or discover valid foreign intelligence 
targets. What SPCMA and the BR and PR/TT programs have in common, then, is that they both exclusively involve metadata, and allow for queries of 
identifiers belonging to U.S. persons. 


(FSHSIYNF) Unlike SPCMA, however, the BR and PR/TT Programs authorize the acquisition of unselected, bulk metadata. Because of the sensitivity of 
this metadata, it may only be queried with identifiers for which RAS exists to believe that the identifier is directly associated with the Foreign Powers 
specified in the Court Order granted by the FISC. You will learn much more about the RAS standard in Module 3. 
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DATE/PREPARER: Topic Page Classification Screen Number 
(U) Knowledge FOP-SECRETHISITNOFORN 10 of 12 
Check 


FRAME ID: 1080 (U) Knowledge Check 


1. GSHSIANF) What is the purpose of the BR and PR/TT Bulk Metadata Programs? 
a) {4S4SHNF) To permit NSA to learn more about a terrorist target’s communications, even 
those terrorists potentially located in the United States 
NEXT FRAME ID: 1081 b) (FSHSIANE) To give NSA the authority to collect and analyze the content of foreign and domestic 
terrorist telecommunications traffic 
c) (FSHSHNF) To enable NSA to more effectively collect and analyze telephony and internet 
communications metadata associated with the 


BACK FRAME ID: 1070 d) (U)AIl of the above 
ALT TAG: 


GRAPHIC/AV: 
(U) Knowledge checks in the travel journal 


2. (FSHSI/NF) The BR and PRAT Bulk Metadata Programs enable NSA to query identifiers related to... 
a) Allterrorists regardless of their affiliation and origin. 
b) Terrorists/terrorist groups associated with HE Foreign Powers, | 
c) Any foreign intelligence target. 


d) Terrorists/terrorist groups associated vin 


(U) (OGC Attorney): Lets make a few notes in our travel journal and check to see what you remember from this topic! 


ANSWERS: 

Question 1: (FS#SHNE) Correct! The purpose of the BR and PR/TT Bulk Metadata Programs is to permit NSA to learn more about a terrorist target’s 
communications, even those terrorists potentially located in the United States. 

(FSHSIENE) Incorrect. The correct answer is a). The purpose of the BR and PR/TT Bulk Metadata Programs is to permit NSA to learn more about a 
terrorist target's communications, even those terrorists potentially located in the United States. 


Question 2: (FSHSH/NF) Correct! The BR and PR/TT Bulk Metadata Programs enable NSA to query identifiers related to terrorists/terrorist groups who fall 
under HliiForeign Powers 

(TS//SI//NF) Incorrect. The correct answer is b). The BR and PR/TT Bulk Metadata Programs enable NSA to query identifiers related to terrorists/terrorist 
groups who fall under Hl Foreign Powers 
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DATE/PREPARER: Topic Page Classification Screen Number 
(U) Knowledge FOP-SEGREHSHINOFORN 11 of 12 
Check 


FRAME ID: 1081 (U) Knowledge Check 


3. (FSHSHANF) One of the differences between BR and PR/TT is that the is composed of call detail 
records delivered by the telecommunications providers, while the must be processed/extracted from 
live, streaming Internet communications. 

bulk metadata, PR/TT metadata 


PR/TT metadata, bulk metadata 
PR/TT metadata, BR metadata 
BR metadata, PR/TT metadata 


NEXT FRAME ID: 1090 


BACK FRAME ID: 1080 


ALT TAG: 4. GSHSIANF) Which of the following is true of BR and PR/TT and not other authorities? 
a) (FSHSIANF) In the BR and PR/TT authorities, NSA is authorized to obtain metadata in bulk from 


GRAPHIC/AV: U.S.-based telecommunications service providers that may not be available from other collection 
(U) Knowledge checks in the travel journal sources, and NSA can only query that metadata for counter proliferation purposes. 


(FSHSHANEF) In the BR and PR/TT authorities, NSA is authorized to obtain content from U.S.- 
based telecommunications service providers that may not be available from other collection 
sources, and NSA can only query that content for counterterrorism purposes. 

(FSHSI/NE) In the BR and PR/TT authorities, NSA is authorized to obtain metadata in bulk 
from U.S.-based telecommunications service providers that may not be available from 
other collection sources, and NSA can only query that metadata for counterterrorism 
purposes. 

(FSHSHANEF) In the BR and PR/TT authorities, NSA is authorized to obtain metadata in bulk from 
foreign telecommunications service providers that may not be available from other collection 
sources, and NSA can query that intelligence for any foreign intelligence purpose. 


(No audio or transcript on this page) 


ANSWERS: 


Question 3: 


(TS//SI//NE) Incorrect. The correct answer is d). One of the differences between BR and PR/TT is that 


Question 4: (FS#SHNE) Correct! In the BR and PR/TT authorities, NSA is authorized to obtain metadata in bulk from U.S.-based telecommunications 
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service providers that may not be available from other collection sources, and NSA can only query that metadata for counterterrorism purposes. 


(FSHSIANEF) Incorrect. The correct answer is c). In the BR and PR/TT authorities, NSA is authorized to obtain metadata in bulk from U.S.-based 
telecommunications service providers that may not be available from other collection sources, and NSA can only query that metadata for 
counterterrorism purposes. 


FOP SECRETYSHANOFORN 
Page 13 of 14 


DATE/PREPARER: TAP Topic Page Classification Screen Number 
(U) Summary FOP-SEGRETFYSHNOFORN 12 of 12 


FRAME ID: 1090 
(U#EOYO) Now that we have completed this module, you should be able to: 


(FSHSIENF) Identify the purpose of the BR and PR/TT Bulk Metadata Programs 


(FSHSHANF) Identify the BB Foreign Powers covered by the BR and PR/TT Foreign 
NEXT FRAME ID: N/A Intelligence Surveillance Court (FISC) Orders 


(FSHSIENF) Contrast the differences in the authorities granted between BR FISC 
Orders and PR/TT FISC Orders 


(FSHSHENF) Recognize the role of the Bulk Metadata Programs in the context of the 
broader set of SIGINT authorities 


GRAPHIC/AV: 
(U) Review learning objectives in the travel 
journal 


(UHFOUS) (OGC Attorney): Now that we have completed the first part of our road trip, you should be able to: 
(FSHSIENF) Identify the purpose of the BR and PR/TT Bulk Metadata Programs 


(FSHSIZNF) Identify the oreign Powers covered by the BR and PR/TT Foreign Intelligence Surveillance Court (FISC) Orders 
(FSHSIENF) Contrast the differences in the authorities granted between BR FISC Orders and PR/TT FISC Orders 
(FSHSIENF) Recognize the role of the Bulk Metadata Programs in the context of the broader set of SIGINT authorities 
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